Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/caKor4A1tZJTtsTaJE_HFOsk8Y8.roa
File: caKor4A1tZJTtsTaJE_HFOsk8Y8.roa (raw, json)
Hash identifier: EWpMmeujLmcQK1d86SC+XLJ5zodPF5qMKNdiPJwIeCI=
Subject key identifier: 71:A2:A8:AF:80:35:B5:92:53:B6:C4:DA:24:4F:C7:14:EB:24:F1:8F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0880D5DB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/caKor4A1tZJTtsTaJE_HFOsk8Y8.roa
Signing time: Fri 08 Apr 2022 22:38:53 +0000
ROA not before: Fri 08 Apr 2022 22:38:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142661083 (0x880d5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 8 22:38:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71a2a8af8035b59253b6c4da244fc714eb24f18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:4b:0f:bd:95:f3:95:43:49:38:20:92:c9:
e6:1a:f6:ef:ee:cc:d8:8e:25:47:25:5b:f2:72:a4:
da:15:32:47:1d:35:43:df:c6:9a:f0:38:59:7f:d0:
64:ba:18:61:38:fd:29:41:62:06:d2:31:27:88:50:
6b:d2:24:c9:79:6e:43:77:d2:51:ea:2e:6d:6e:5b:
c0:7d:1c:88:36:b2:3b:d2:fc:5c:d9:33:05:ea:7b:
b7:a0:37:3b:da:ed:e9:97:19:89:d3:1e:4f:ee:82:
6f:93:e1:34:48:28:40:46:f6:4d:e3:6c:13:5c:04:
50:7d:95:0c:e3:e4:a7:ec:2c:e8:ce:d7:e5:dc:01:
7b:9b:58:db:bf:9f:38:14:98:cc:cc:c7:15:86:81:
97:63:0d:a8:75:0d:1c:45:5c:3e:89:af:a3:ad:28:
d7:0b:cf:2f:5c:29:83:29:40:a0:4e:32:81:99:12:
cf:c1:ab:96:3f:b2:e6:17:ef:62:b9:c4:82:53:ea:
d5:fe:7a:58:e9:8c:be:8c:c2:b1:79:45:e2:b6:b1:
67:7d:24:ae:63:63:ed:ae:85:ab:fd:7d:73:96:d2:
3a:ec:bd:fa:e0:c2:93:32:54:fa:38:7c:ef:2f:be:
b5:29:2f:86:93:8e:43:ad:28:68:aa:3f:8c:15:8a:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:A8:AF:80:35:B5:92:53:B6:C4:DA:24:4F:C7:14:EB:24:F1:8F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/caKor4A1tZJTtsTaJE_HFOsk8Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0-77.90.154.255
77.90.179.0/24
77.90.191.0/24
213.209.133.0-213.209.134.255
213.209.143.0/24
213.209.145.0/24
213.209.149.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:f6:5e:27:0c:df:a6:ab:1a:09:3d:7b:13:cd:8f:7e:a0:a1:
15:1b:52:31:c9:d6:4d:a7:35:87:92:55:ae:b2:81:16:14:d4:
c4:f9:9b:c4:ac:18:0c:71:e5:13:3d:38:66:82:22:cf:b9:6f:
9b:36:2f:c0:b1:8c:5a:74:d7:82:04:12:54:17:4d:ac:ac:f4:
30:2d:e2:2f:0e:63:9f:e6:71:c1:6b:13:5f:1a:1d:f7:ab:1d:
c2:fe:4a:b7:82:cd:c3:5b:89:1d:ad:5f:23:fe:2a:5f:1c:6a:
91:03:41:06:06:ae:5e:92:6f:be:9a:a0:b1:f3:53:aa:a3:ec:
f3:61:6d:b1:a3:22:cc:84:93:b7:80:e6:43:3e:f1:b6:6d:30:
37:f6:64:b6:07:4d:5a:fa:b9:25:82:81:0d:c1:5c:4e:34:f3:
eb:66:2a:6b:05:3e:a3:49:c4:68:d1:be:1f:b8:3f:b3:bd:59:
35:b3:da:55:01:a7:23:01:ae:ad:17:b8:d6:30:d7:65:1c:44:
58:16:d6:95:67:0e:3b:17:cc:44:14:f4:ff:f5:02:b8:51:87:
b6:0c:41:b1:42:f3:4f:29:4c:45:27:e7:14:74:6a:e8:1d:e9:
b7:55:f9:70:0e:b0:5c:0a:bd:05:a3:c8:3d:12:89:a8:ee:9e:
2f:e3:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org